#禁止IP直接访问lighttpd服务器,禁止其他人的域名解析到lighttpd服务器进行访问,防止恶意解析 $HTTP["host"] !~ "(^|.)yourdomAIn.com$" { url.access-deny = ("") }
#禁止非指定网站域名访问服务器,需要开启mod_access模块
$HTTP["referer"] !~ "^($|http://.www.yourdomain.com)" {
url.access-deny = ( "" )
}
上面的是直接禁止并返回403状态,但也可以结合
url.redirect = ( "(.*)" => "your URL" )
进行重定向到指定的页面,例如专门弄个防盗链的说明,或者是图片,前提是开启了mod_redirect模块
#### request method restrictions (v1.5.x ONLY)
# $HTTP["request-method"] !~ "^(GET|HEAD)" {
# url.access-deny = ( "" )
# }
#### deny access to unwanted bots or bad clients
# $HTTP["useragent"] =~ "(Google|BadGuy)" {
# url.access-deny = ( "" )
# }
#### access control list for hidden_dir (not for use behind proxies)
# $HTTP["remoteip"] !~ "127.0.0.1|10.10.10.2|20.10.20.30" {
# $HTTP["url"] =~ "^/hidden_dir/" {
# url.access-deny = ( "" )
# }
# }
#### url redirect requests for xiaohost.com to www.xiaohost.com
# $HTTP["host"] =~ "^(xiaohost.com)$" {
# url.redirect = ( "/(.*)" => "http://www.%1/$1")
# }
#### stop image hijacking (anti-hotlinking)
# $HTTP["referer"] !~ "^(http://xiaohost.com|http://www.xiaohost.com)" {
# url.access-deny = ( ".jpg", ".jpeg", ".png", ".avi", ".mov" )
# }
#### virtual host limits
# $HTTP["host"] !~ "^(xiaohost.com|www.xiaohost.com)" {
# url.access-deny = ( "" )
# }
#### stop referer spam
# $HTTP["referer"] =~ "(tarotathome|casinospam)" {
# url.access-deny = ( "" )
# }